[CODE]

2008-11-21,21:17:44

SysLog Scanner 1.0 - build 20080726
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 2 (build 2600) - Administrators



========================================
注册项

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <金山清理专家实时保护><"F:\Kingsoft Antispy\monitor\kastray.exe">  [(Verified)Kingsoft Corporation, 2008,11,14,88, C:2008-11-14 12:16 M:2008-11-14 12:16]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    <nwiz><nwiz.exe /install>  [N/A, C:2007-04-20 06:05 M:2007-04-20 06:05]
    <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    <360Safetray><D:\360safe\safemon\360tray.exe /start>  [(Verified)奇虎网, 5, 0, 0, 1002, C:2008-08-25 14:12 M:2008-08-25 14:12]
    <360Safebox><"D:\360Safebox\safeboxTray.exe" /r>  [(Verified)360安全中心, 2, 4, 0, 1001, C:2008-09-25 18:40 M:2008-09-25 18:40]
    <NMGameX_AutoRun><C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|NMGameX, 1, 0, 1, 3, C:2006-07-10 11:20 M:2006-07-10 11:20]
    <RTHDCPL><RTHDCPL.EXE>  [(Verified)Realtek Semiconductor Corp., 2.2.0.2, C:2007-11-03 12:36 M:2008-04-10 16:52]
    <Alcmtr><ALCMTR.EXE>  [(Verified)Realtek Semiconductor Corp., 1.6.0.2, C:2008-07-05 05:38 M:2005-05-03 18:43]
    <AVP><"C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe">  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:36 M:2008-02-08 18:36]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  []
    <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  []
    <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&V使用Vagaa哇嘎下载]
    <><D:\Vagaa\Data\vg.htm>  [N/A, C:2008-05-10 15:17 M:2007-07-21 01:29]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载]
    <><D:\xunlei\Program\geturl.htm>  [N/A, C:2008-05-21 19:47 M:2008-07-28 15:43]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接]
    <><D:\xunlei\Program\getallurl.htm>  [N/A, C:2008-05-21 19:47 M:2007-12-10 14:17]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\导出到 Microsoft Office Excel(&X)]
    <><res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\添加到QQ表情]
    <><C:\Program Files\Tencent\QQ\AddEmotion.htm>  []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
    <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|(Verified)N/A, C:2007-05-19 16:00 M:2007-05-19 16:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|(Verified)N/A, C:2007-07-26 19:44 M:2005-01-28 15:25]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00|Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}]
    <启动迅雷5><D:\xunlei\Thunder.exe>  [Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-05-21 19:47 M:2008-08-12 17:41]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{0A155D3C-68E2-4215-A47A-E800A446447A}]
    <浩方对战平台><D:\Platform\GameClient.exe>  [(Verified)上海浩方在线信息技术有限公司, 4.8.3.530, C:2008-05-30 20:20 M:2008-05-30 20:20]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MenuExt\添加到QQ表情]
    <><D:\Tencent\QQ2009\Bin\AddEmotion.htm>  [N/A, C:2008-09-15 12:39 M:2008-09-15 12:39]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}]
    <Web 反病毒统计><C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll>  []


========================================
启动项

[QQ游戏启动加速程序]
    <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> "D:\QQgame\Accel.exe"  > [(Verified)深圳市腾讯计算机系统有限公司, 2, 0, 103, 5, C:2008-03-18 18:09 M:2008-03-18 18:09]
[Adobe Gamma Loader]
    <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> "C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe"  > [Adobe Systems, Inc., 1, 0, 0, 1, C:2008-05-05 20:08 M:2002-08-06 13:37]


========================================
计划任务



========================================
组件


IE Extension
[Web 反病毒统计]
    {85E0B171-04FA-11D1-B7DA-00A0C90348D6}  <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll>  []

Shell Extension
[Display Panning CPL Extension]
    {42071714-76d4-11d1-8b24-00a0c9068ff3}  <deskpan.dll>  []
[HyperTerminal Icon Ext]
    {88895560-9AA2-1069-930E-00AA0030EBC8}  <C:\WINDOWS\system32\hticons.dll>  [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2007-07-26 19:33 M:2007-05-20 00:00]
[Microsoft Agent Character Property Sheet Handler]
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}  <C:\WINDOWS\msagent\agentpsh.dll>  []
[WinRAR shell extension]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2007-07-26 20:50 M:2007-05-29 22:40]
[ShellLink for Application References]
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}  <C:\WINDOWS\system32\dfshim.dll>  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]
[Shell Icon Handler for Application References]
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}  <C:\WINDOWS\system32\dfshim.dll>  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]
[Catalyst Context Menu extension]
    {5E2121EE-0300-11D4-8D3B-444553540000}  <C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll>  [Copyright 2004, 2, 0, 0, 0, C:2006-12-19 19:16 M:2006-12-19 19:16]
[NvCpl DesktopContext Class]
    {A70C977A-BF00-412C-90B7-034C51DA2439}  <C:\WINDOWS\system32\nvcpl.dll>  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
[Play on my TV helper]
    {FFB699E0-306A-11d3-8BD1-00104B6F7516}  <C:\WINDOWS\system32\nvcpl.dll>  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
[Desktop Explorer]
    {1CDB2949-8F65-4355-8456-263E7C208A5D}  <C:\WINDOWS\system32\nvshell.dll>  [N/A, C:2007-04-20 06:05 M:2007-04-20 06:05]
[Desktop Explorer Menu]
    {1E9B04FB-F9E5-4718-997B-B8DA88302A47}  <C:\WINDOWS\system32\nvshell.dll>  [N/A, C:2007-04-20 06:05 M:2007-04-20 06:05]
[nView Desktop Context Menu]
    {1E9B04FB-F9E5-4718-997B-B8DA88302A48}  <C:\WINDOWS\system32\nvshell.dll>  [N/A, C:2007-04-20 06:05 M:2007-04-20 06:05]
[Web 反病毒统计]
    {85E0B171-04FA-11D1-B7DA-00A0C90348D6}  <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll>  []
[AutoCAD 数字签名图标覆盖处理程序]
    {36A21736-36C2-4C11-8ACB-D4136F2B57BD}  <C:\WINDOWS\system32\AcSignIcon.dll>  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
[Autodesk Drawing Preview]
    {AC1DB655-4F9A-4c39-8AD2-A65324A4C446}  <C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcThumbnail16.dll>  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]

Protocols
[Cor MIME Filter, CorFltr, CorFltr 1]
    {1E66F26B-79EE-11D2-8710-00C04F79ED0D}  <mscoree.dll>  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]
[]
    {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC}  <C:\WINDOWS\system32\KuGoo3DownXControl.ocx>  [N/A, C:2008-05-10 17:49 M:2007-08-14 09:21]

BrowserHelperObject
[ThunderAtOnce Class]
    {01443AEC-0FD1-40fd-9C87-E93D1494C233}  <D:\xunlei\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-05-21 19:47 M:2008-06-13 09:43]
[IESuper]
    {1A49F431-2A2E-41a5-9080-0F41D1A3AEC2}  <F:\IESuper\iesuper.dll>  [(Verified)IESuper.com, 1, 1, 1, 0, C:2008-07-31 14:39 M:2008-07-31 14:39]
[WebProtect]
    {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B}  <C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll>  [(Verified)China Merchants Bank, 1, 0, 0, 1, C:2008-05-10 15:10 M:2007-08-20 16:15]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <D:\xunlei\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-05-21 19:47 M:2008-06-13 09:43]
[SafeMon Class]
    {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <D:\360safe\safemon\safemon.dll>  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]
[kingsoft browser shield]
    {D963BE1A-6B35-47DB-B002-49FAE71D85CC}  <F:\KINGSO~1\KASBrowserShield.DLL>  [(Verified)Kingsoft Corporation, 2008,04,15,2, C:2008-10-30 10:47 M:2008-10-30 10:47]

ActiveX Extension
[ThunderAtOnce Class]
    {01443AEC-0FD1-40FD-9C87-E93D1494C233}  <D:\xunlei\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-05-21 19:47 M:2008-06-13 09:43]
[GerneralPeerID Class]
    {0A47E819-F82E-4D5D-B806-6A9EA94D68CD}  <D:\xunlei\Components\InMedia\peerid.dll>  [Copyright 2007, 1, 0, 0, 1, C:2008-05-21 19:47 M:2008-04-29 15:29]
[Edit Class]
    {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D}  <C:\WINDOWS\system32\CMBEdit.dll>  [Copyright 2004, 1, 2, 0, 3, C:2008-05-10 15:06 M:2007-09-14 15:54]
[IESuperHelper]
    {1A49F431-2A2E-41A5-9080-0F41D1A3AEC1}  <F:\IESuper\iesuper.dll>  [(Verified)IESuper.com, 1, 1, 1, 0, C:2008-07-31 14:39 M:2008-07-31 14:39]
[IESuper]
    {1A49F431-2A2E-41A5-9080-0F41D1A3AEC2}  <F:\IESuper\iesuper.dll>  [(Verified)IESuper.com, 1, 1, 1, 0, C:2008-07-31 14:39 M:2008-07-31 14:39]
[iTrusPTA Class]
    {1E0DFFCF-27FF-4574-849B-55007349FEDA}  <C:\WINDOWS\system32\aliedit\pta.dll>  [(Verified)Copyright 2001, 2, 5, 1, 509, C:2008-07-06 23:11 M:2008-03-11 18:50]
[Thunder Agent Class]
    {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}  <D:\xunlei\ComDlls\ThunderAgent_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-05-21 19:47 M:2008-06-13 09:43]
[EditCtrl Class]
    {488A4255-3236-44B3-8F27-FA1AECAA8844}  <C:\WINDOWS\system32\aliedit\aliedit.dll>  [(Verified)Copyright 2007, 2, 1, 2, 1, C:2008-05-19 21:19 M:2008-05-20 15:48]
[Thunder Browser Helper]
    {53763D1C-9CA8-4C7C-9756-A8E6B8FC063B}  <C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll>  []
[WebProtect]
    {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B}  <C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll>  [(Verified)China Merchants Bank, 1, 0, 0, 1, C:2008-05-10 15:10 M:2007-08-20 16:15]
[XMP Class]
    {6483F145-A768-4C41-AACC-52D4D7845851}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>  [Xunlei Networking Technologies,LTD, 2, 1, 6, 81, C:2008-05-10 19:34 M:2008-09-19 19:01]
[XDRM]
    {693571CB-54A3-4E90-9D52-EEAE1334E2D3}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>  [Copyright XunLei 2007, 1, 0, 0, 7, C:2008-05-10 19:34 M:2008-09-19 19:01]
[WangWangObj Class]
    {6E213FC7-DD5A-4115-B7E6-D4C7838C361E}  <D:\WangWang\WangWangX6.dll>  [(Verified)阿里巴巴软件(上海)有限公司, 1, 0, 0, 5, C:2008-05-19 21:32 M:2008-03-18 12:14]
[AxInputControl Class]
    {73E4740C-08EB-4133-896B-8D0A7C9EE3CD}  <C:\WINDOWS\system32\INPUTC~1.DLL>  [Copyright 2003, 1, 0, 0, 12, C:2008-05-10 15:07 M:2005-07-25 15:51]
[MediaComm Class]
    {7670648D-461B-42AF-BDFE-46D26AF5EFF2}  <D:\xunlei\Components\InMedia\MediaAddin17.dll>  []
[360SafeLive]
    {87515F61-A66C-4319-A0E0-D416CB8059E3}  <D:\360safe\live.dll>  [(Verified)360.cn, 1, 0, 1, 1028, C:2008-07-16 22:00 M:2008-07-16 22:00]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <D:\xunlei\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-05-21 19:47 M:2008-06-13 09:43]
[AxSubmitControl Class]
    {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2}  <C:\WINDOWS\system32\SUBMIT~1.DLL>  [Copyright 2003, 1, 0, 0, 5, C:2008-05-10 15:07 M:2005-01-26 00:36]
[RavOnline Class]
    {9FAFB576-6933-4CCC-AB3D-B988EC43D04E}  <C:\WINDOWS\Downloaded Program Files\RavOLCtl.dll>  [Beijing Rising Information Technology Co., Ltd., 20.0.0.17, C:2008-08-19 09:46 M:2008-08-19 09:46]
[DapCtrl Class]
    {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}  <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5805.77.(473).dll>  [ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5805, 77, C:2008-09-24 23:29 M:2008-09-19 19:01]
[SafeMon Class]
    {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <D:\360safe\safemon\safemon.dll>  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]
[ScreenCapture Class]
    {BFB79EE1-04AE-4D4A-B85E-27EE5F30C095}  <C:\WINDOWS\system32\TXGYMailActiveX.dll>  [(Verified)Tencent Inc., 1, 0, 1, 29, C:2008-04-28 15:09 M:2008-04-28 15:09]
[RealPlayer G2 Control]
    {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}  <D:\baofeng\Codec\rmoc3260.dll>  [(Verified)RealNetworks, Inc., 6.0.9.2568, C:2006-10-18 23:05 M:2006-10-18 23:05]
[Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000}  <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx>  [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16]
[Thunder DapPlayer]
    {EEDD6FF9-13DE-496B-9A1C-D78B3215E266}  <D:\xunlei\Components\DownAndPlay\DapPlayer3.0.5712.71.731.dll>  [ShenZhen Thunder Networking Technologies Ltd., 3, 0, 5712, 71, C:2008-08-02 14:02 M:2008-07-31 15:12]
[XPPlayer Class]
    {F3E70CEA-956E-49CC-B444-73AFE593AD7F}  <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5853.212.(473).dll>  [Xunlei Networking Technologies,LTD, 2, 1, 5853, 212, C:2008-09-24 23:29 M:2008-09-19 19:01]

Context Menu
[Kaspersky Anti-Virus]
    {dd230880-495a-11d1-b064-008048ec2fc5}  <C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\ShellEx.dll>  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]
[WinRAR]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2007-07-26 20:50 M:2007-05-29 22:40]


========================================
服务

[3ware Controller Service / 3wareSrv][Stopped/Auto Start]
    <%SystemRoot%\System32\3wareSrv.exe>  [N/A, C:2007-08-01 23:28 M:2006-02-26 23:21]
[AMD-813x Hot-Plug Service / AmdShpcSrv][Running/Auto Start]
    <%SystemRoot%\system32\AmdHpSrv.exe>  [AMD, Inc., 1.3.9, C:2007-08-01 23:28 M:2006-02-26 23:02]
[卡巴斯基反病毒软件 7.0 / AVP][Stopped/Auto Start]
    <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r>  []
[C-DillaCdaC11BA / C-DillaCdaC11BA][Running/Auto Start]
    <C:\WINDOWS\system32\drivers\CDAC11BA.EXE>  [Macrovision, 4.20.020, C:2008-05-10 19:18 M:2008-05-10 19:18]
[Help and Support / helpsvc][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll">  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Disabled]
    <C:\WINDOWS\system32\mnmsrvc.exe>  []

[Contrl Center of Storm Media / ccosm][Running/Auto Start]
    <D:\baofeng\stormliv.exe /asservice>  [(Verified)北京暴风网际科技有限公司, 3, 8, 10, 29, C:2008-03-11 14:33 M:2008-10-29 16:40]
[Cmb WebProtect Support / CMBWPS][Running/Auto Start]
    <C:\Program Files\CMBCHINA\WebProtect\WPService.exe /start>  [(Verified)China Merchants Bank, 1, 0, 0, 1, C:2008-05-10 15:10 M:2007-08-27 16:35]
[Kingsoft Basic Service / kaccore][Running/Manual Start]
    <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe">  [(Verified)Kingsoft Corporation, 2008,11,03,330, C:2008-11-03 08:49 M:2008-11-03 08:49]
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
    <%SystemRoot%\system32\nvsvc32.exe>  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]


========================================
驱动

[2310_00 / 2310_00][Stopped/Boot Start]
    <system32\DRIVERS\2310_00.sys>  [HighPoint Technologies, Inc., v1.15.7.201, C:2007-08-01 23:28 M:2007-02-01 21:42]
[3wareDrv / 3wareDrv][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\3wareDrv.sys>  [N/A, C:2007-08-01 23:28 M:2006-02-26 23:21]
[3waregsm / 3waregsm][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\3waregsm.sys>  [N/A, C:2007-08-01 23:28 M:2006-02-26 23:21]
[3wDrv100 / 3wDrv100][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\3wDrv100.sys>  [N/A, C:2007-08-01 23:28 M:2004-07-01 21:30]
[3wFlt100 / 3wFlt100][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\3wFlt100.sys>  [N/A, C:2007-08-01 23:28 M:2004-07-01 16:54]
[aaatimeo / aaatimeo][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aaatimeo.sys>  [Microsoft Corporation, 5.00.1877.1, C:2007-08-01 23:28 M:2006-02-26 23:21]
[Adaptec RAID Miniport Driver / aac][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aac.sys>  [Adaptec, Inc., 4.2.0.7320, C:2007-08-01 23:28 M:2006-02-26 23:21]
[aarich / aarich][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aarich.sys>  [Adaptec, Inc., V4.00.36.2, C:2007-08-01 23:28 M:2006-02-26 23:21]
[adp94xx / adp94xx][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\adp94xx.sys>  [Adaptec, Inc., 1.2.5929.0 built by: WinDDK, C:2007-08-01 23:28 M:2006-10-13 13:54]
[ACARD AEC6210UF UltraDMA33 Controller / aec6210][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aec6210.sys>  [ACARD Technology Corp., 5.0.4.3, C:2007-08-01 23:28 M:2006-02-26 23:21]
[ACARD AEC6260 UltraDMA-66 Controller / aec6260][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aec6260.sys>  [ACARD Technology Corp., 1.1.4.12, C:2007-08-01 23:28 M:2006-02-26 23:21]
[aec6280 / aec6280][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aec6280.sys>  [ACARD Technology Corp., 1, 0, 5, 4, C:2007-08-01 23:28 M:2006-02-26 23:21]
[AEC6880 / AEC6880][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\AEC6880.sys>  [ACARD Technology Corp., 2.10, C:2007-08-01 23:28 M:2006-02-26 23:21]
[aec6897 / aec6897][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aec6897.sys>  [ACARD Technology Corp., 1, 0, 3, 2, C:2007-08-01 23:28 M:2006-02-26 23:21]
[AMD-813x Bus-Filter Driver / AmdPCI][Running/Boot Start]
    <system32\DRIVERS\AmdPci32.sys>  [AMD, Inc., 1.3.9, C:2007-08-01 23:28 M:2006-02-26 23:02]
[ATI Cabo AGP Filter / caboagp][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\atisgkaf.sys>  [ATI Technologies Inc., 5.00.2196.1015, C:2007-08-01 23:28 M:2006-02-26 23:02]
[cda1000 / cda1000][Stopped/Boot Start]
    <system32\DRIVERS\cda1000.sys>  [Adaptec, Inc., v4.30.15, C:2007-08-01 23:28 M:2006-02-26 23:21]
[CdaC15BA / CdaC15BA][Running/Auto Start]
    <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS>  [Macrovision Europe Ltd, 3.17.000, C:2008-05-10 19:18 M:2008-05-10 19:18]
[CMB8100 / CMB8100][Running/Auto Start]
    <\??\C:\WINDOWS\system32\Drivers\CertClient.dat>  [N/A, C:2008-09-15 11:39 M:2006-11-30 16:31]
[CMBProtector / CMBProtector][Running/Auto Start]
    <\??\C:\WINDOWS\system32\Drivers\CMBProtector.dat>  [N/A, C:2008-09-15 11:39 M:2007-01-18 14:28]
[EagleNT / EagleNT][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\drivers\EagleNT.sys>  []
[FastSx / FastSx][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\FastSx.sys>  [Promise Technology, Inc.,  2.00.00.25, C:2007-08-01 23:28 M:2006-02-26 23:21]
[fasttrak / fasttrak][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\fasttrak.sys>  [Promise Technology, Inc.,  2.00.0.34, C:2007-08-01 23:28 M:2006-02-26 23:21]
[fasttx2k / fasttx2k][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\fasttx2k.sys>  [Promise Technology, Inc.,  1.00.0.37, C:2007-08-01 23:28 M:2006-02-26 23:21]
[hpt374 / hpt374][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\hpt374.sys>  [HighPoint Technologies, Inc., v2.05s, C:2007-08-01 23:28 M:2006-02-26 23:21]
[hpt3xx / hpt3xx][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\hpt3xx.sys>  [HighPoint Technologies, Inc., v2.351, C:2007-08-01 23:28 M:2006-02-26 23:21]
[hptmv / hptmv][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\hptmv.sys>  [HighPoint Technologies, Inc., v1.17, C:2007-08-01 23:28 M:2006-02-26 23:21]
[hptmv6 / hptmv6][Stopped/Boot Start]
    <system32\DRIVERS\hptmv6.sys>  [HighPoint Technologies, Inc., v1.04, C:2007-08-01 23:28 M:2006-02-26 23:21]
[hptpro / hptpro][Stopped/Boot Start]
    <system32\DRIVERS\hptpro.sys>  [HighPoint Technologies, Inc., 1.23.12.10, C:2007-08-01 23:28 M:2006-02-26 23:21]
[ITE CIR Driver / ITECIR][Stopped/Manual Start]
    <system32\DRIVERS\ITECIR.sys>  [IET Tech. Inc., 2, 4, 0, 0, C:2007-08-01 23:28 M:2006-02-26 23:03]
[ITERAID_Service_Install / iteraid][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\iteraid.sys>  [Integrated Technology Express, Inc., v1.7.1.91 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:21]
[Klif / klif][Running/System Start]
    <\??\C:\WINDOWS\system32\drivers\klif.sys>  [Kaspersky Lab, 6.12.10.377, C:2007-12-28 19:51 M:2007-12-28 19:51]
[m5281 / m5281][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\m5281.sys>  [ALi Corporation, 5.029, C:2007-08-01 23:28 M:2006-02-26 23:21]
[MegaIDE / MegaIDE][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\MegaIDE.sys>  [LSI Logic Corporation., 4.1.0709.2003, C:2007-08-01 23:28 M:2006-02-26 23:21]
[mraid35x / mraid35x][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\mraid35x.sys>  [LSI Logic Corporation, 6.41.32 built by: WinDDK, C:2007-08-01 23:45 M:2006-02-26 23:21]
[npkcrypt / npkcrypt][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\npkcrypt.sys>  []
[npkycryp / npkycryp][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\npkycryp.sys>  []
[CMD IDE Raid Controller / Pnp649r][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\pnp649r.sys>  [CMD Technology, Inc., 1, 0, 0, 0, C:2007-08-01 23:28 M:2007-01-21 00:18]
[raidsrc / raidsrc][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\raidsrc.sys>  [Intel, 5.3.13, C:2007-08-01 23:28 M:2006-02-26 23:21]
[rr232x / rr232x][Stopped/Boot Start]
    <system32\DRIVERS\rr232x.sys>  [HighPoint Technologies, Inc., v1.06, C:2007-08-01 23:28 M:2007-02-01 21:04]
[Secdrv / Secdrv][Running/Auto Start]
    <system32\DRIVERS\secdrv.sys>  [Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.00.060, C:2007-05-19 16:00 M:2008-05-15 00:57]
[sptrak / sptrak][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\sptrak.sys>  [Promise Technology, Inc., 1.10 Build 41, C:2007-08-01 23:28 M:2006-02-26 23:21]
[Symmpi / Symmpi][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\symmpi.sys>  [LSI Logic, 1.20.18.00 built by: WinDDK, C:2007-08-01 23:28 M:2005-06-13 21:51]
[sysHostSvc / sysHostSvc][Running/Auto Start]
    <\??\C:\WINDOWS\system32\drivers\GuiHelp.sys>  [Microsoft Corporation, 5, 1, 2467, 4, C:2007-07-26 19:24 M:2007-07-26 19:24]
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), C:2007-05-19 16:00 M:2006-04-20 19:51]
[TesSafe / TesSafe][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\TesSafe.sys>  [TENCENT, 0, 0, 7, 4, C:2008-06-01 19:16 M:2008-06-25 16:23]
[ULi AGP Controller Bus Filter Driver / ULiAGP][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ULiAGP.sys>  [ULi Electronics Inc., 5.1.2600.2114 built by: WinDDK, C:2007-08-01 23:28 M:2005-03-29 00:12]
[ultra / ultra][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ultra.sys>  [Promise Technology, Inc.,  2.00.0.43, C:2007-08-01 23:49 M:2006-03-28 22:43]
[viamraid / viamraid][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\viamraid.sys>  [VIA Technologies inc,.ltd, 5.1.2600.540, C:2007-08-01 23:29 M:2006-11-08 21:23]

[a320raid / a320raid][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\a320raid.sys>  [(Verified)Adaptec, Inc., v3.00.036, C:2007-08-01 23:28 M:2006-02-26 23:21]
[Adaptec SAS/SATA-II RAID Miniport Driver / aacsas][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aacsas.sys>  [(Verified)Adaptec, Inc., 5.2.0.11829, C:2007-08-01 23:28 M:2007-02-06 23:07]
[adpu160m / adpu160m][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\adpu160m.sys>  [(Verified)Adaptec, Inc., 6,2,0000,000 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:21]
[adpu320 / adpu320][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\adpu320.sys>  [(Verified)Adaptec, Inc., 1.1.000.000 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:21]
[AFAMgt / AFAMgt][Running/Boot Start]
    <system32\DRIVERS\afamgt.sys>  [(Verified)Adaptec, Inc., 4.1.0.7427, C:2007-08-01 23:28 M:2006-03-28 22:43]
[ahcix86 / ahcix86][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ahcix86.sys>  [(Verified)ATI Technologies Inc.,  2.5.1540.34 built by: WinDDK, C:2007-08-01 23:28 M:2006-10-27 04:12]
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start]
    <system32\drivers\ALCXWDM.SYS>  [(Verified)Realtek Semiconductor Corp., 5.10.00.6220 built by: WinDDK, C:2008-02-24 17:24 M:2007-01-25 16:37]
[AliIde / AliIde][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\aliide.sys>  [(Verified)Acer Laboratories Inc., 1.20, C:2007-08-01 23:51 M:2001-08-17 13:51]
[AMD AGP Bus Filter Driver / amdagp][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\amdagp.sys>  [(Verified)Advanced Micro Devices, Inc., 5.00 (xpsp_sp2_rtm.040803-2158), C:2007-08-01 23:34 M:2004-08-03 23:07]
[AMD NB AGP Bus Filter / amdagp8p][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\amdagp8p.sys>  [(Verified)Advanced Micro Devices, Inc., 8.1.2 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:02]
[amdbusdr / amdbusdr][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\amdbusdr.sys>  [(Verified)AMD, 8.2.8, C:2007-08-01 23:28 M:2006-02-26 23:21]
[AMD EIDE 驱动程衼E / amdeide][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\AmdEide.sys>  [(Verified)AMD, 8.2.8, C:2007-08-01 23:28 M:2006-02-26 23:21]
[AMD Processor Driver / AmdK8][Running/System Start]
    <system32\DRIVERS\AmdK8.sys>  [(Verified)Advanced Micro Devices, 1.3.2 (dnsrv(wmbla).060701-2226), C:2007-08-01 23:33 M:2006-07-02 05:43]
[asc / asc][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\asc.sys>  [(Verified)Advanced System Products, Inc., 2.9I-MS (XPClient.010817-1148), C:2007-08-01 23:49 M:2001-08-17 13:52]
[asc3550 / asc3550][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\asc3550.sys>  [(Verified)Advanced System Products, Inc., 3.1E-MS (XPClient.010817-1148), C:2007-08-01 23:49 M:2001-08-17 13:51]
[atiide / atiide][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\atiide.sys>  [(Verified)ATI Technologies Inc., 1.00.0000.3 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:21]
[Promise driver accelerator / bb-run][Running/Boot Start]
    <system32\DRIVERS\bb-run.sys>  [(Verified)Promise Technology, Inc.,  1.0.1.2 built by: WinDDK, C:2007-08-01 23:28 M:2003-11-05 15:45]
[DELL CERC SATA 1.5/6ch RAID Miniport Driver / cercsr6][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\cercsr6.sys>  [(Verified)Adaptec, Inc., 4.1.0.7010, C:2007-08-01 23:28 M:2006-03-28 22:43]
[CmdIde / CmdIde][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\cmdide.sys>  [(Verified)CMD Technology, Inc., 2.0.7 (XPClient.010817-1148), C:2007-08-01 23:51 M:2001-08-31 15:29]
[Cpq32fs2 / Cpq32fs2][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\Cpq32fs2.sys>  [(Verified)Hewlett-Packard Company, 5.24.00.0, C:2007-08-01 23:28 M:2002-11-18 23:47]
[Creative SB16/AWE32/AWE64 Driver (WDM) / ctlsb16][Stopped/Manual Start]
    <system32\drivers\ctlsb16.sys>  [(Verified)Copyright (C) Creative Technology Ltd. 1994-2001, 5.1.2501.0 built by: WinDDK, C:2007-07-26 19:31 M:2001-08-17 12:19]
[dac2w2k / dac2w2k][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\dac2w2k.sys>  [(Verified)Mylex Corporation, 6.00-21 (XPClient.010817-1148), C:2007-08-01 23:49 M:2001-08-17 13:52]
[DC21x4 Based Network Adapter Driver / DC21x4][Stopped/Manual Start]
    <system32\DRIVERS\dc21x4.sys>  [(Verified)Intel Corporation., 5.05.04, C:2007-07-26 19:30 M:2001-08-17 12:12]
[Promise Removable Disk Control Driver / dontgo][Running/Boot Start]
    <system32\DRIVERS\DontGo.sys>  [(Verified)Promise Technology, Inc.,  1.0.0.3 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:21]
[fttxr52P / fttxr52P][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\fttxr52P.sys>  [(Verified)Promise Technology, Inc.,  2.6.0.311 built by: WinDDK, C:2007-08-01 23:28 M:2005-11-09 01:07]
[Fujitsu FUJ02B1 Device Driver / FUJ02B1][Stopped/Manual Start]
    <system32\DRIVERS\FUJ02B1.sys>  [(Verified)FUJITSU LIMITED, 1.21 built by: WinDDK, C:2007-08-01 23:54 M:2001-08-02 03:00]
[%FUJ02E1.DeviceDesc% / FUJ02E1][Stopped/Manual Start]
    <System32\Drivers\FUJ02E1.sys>  [(Verified)Fujitsu Limited, 1, 0, 0, 3, C:2007-08-01 23:28 M:2004-10-18 21:08]
[Fujitsu FUJ02E3 Device Driver / FUJ02E3][Stopped/Manual Start]
    <system32\DRIVERS\FUJ02E3.sys>  [(Verified)FUJITSU LIMITED, 1.00 built by: WinDDK, C:2007-08-01 23:28 M:2004-01-17 06:00]
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
    <system32\DRIVERS\HDAudBus.sys>  [(Verified)Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK, C:2005-01-07 17:07 M:2005-01-07 17:07]
[Intel(R) Management Engine Interface / HECI][Stopped/Manual Start]
    <system32\DRIVERS\HECI.sys>  [(Verified)Intel Corporation, 2.1.22.1026 built by: WinDDK, C:2007-08-01 23:28 M:2006-10-30 19:53]
[Intel RAID Controller / iaStor][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\iaStor.sys>  [(Verified)Intel Corporation, 7.0.0.1020, C:2007-08-01 23:28 M:2007-02-12 13:36]
[IFXTPM / IFXTPM][Stopped/Manual Start]
    <system32\DRIVERS\IFXTPM.SYS>  [(Verified)Infineon Technologies AG, 1.80.0002.00 built by: WinDDK, C:2007-08-01 23:28 M:2005-10-21 14:19]
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
    <system32\drivers\RtkHDAud.sys>  [(Verified)Realtek Semiconductor Corp., 5.10.0.5605 built by: WinDDK, C:2007-11-03 12:36 M:2008-04-17 16:33]
[JMicron Hot-Plug Driver / JGOGO][Running/Boot Start]
    <system32\DRIVERS\JGOGO.sys>  [(Verified)JMicron , 5.0.3790.1, C:2007-08-01 23:28 M:2006-02-08 01:52]
[JRAID / JRAID][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\jraid.sys>  [(Verified)JMicron Technology Corp., 1.17.17.00 built by: WinDDK, C:2007-08-01 23:28 M:2007-04-12 06:18]
[Kl1 / kl1][Running/Boot Start]
    <system32\drivers\kl1.sys>  [(Verified)Kaspersky Lab, 6.1.30.0, C:2007-10-31 13:41 M:2008-05-28 22:26]
[Kaspersky Anti-Virus NDIS Filter / klim5][Running/Manual Start]
    <system32\DRIVERS\klim5.sys>  [(Verified)Kaspersky Lab, 6.1.26.0, C:2007-12-13 13:28 M:2007-12-13 13:28]
[m5287 / m5287][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\m5287.sys>  [(Verified)ULi Electronics Inc., 6.209, C:2007-08-01 23:28 M:2005-09-24 00:53]
[m5288 / m5288][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\m5288.sys>  [(Verified)ULi Electronics Inc., 6.218, C:2007-08-01 23:28 M:2005-12-24 04:54]
[m5289 / m5289][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\m5289.sys>  [(Verified)ULi Electronics Inc., 5.030, C:2007-08-01 23:28 M:2005-07-04 20:21]
[mv61xx / mv61xx][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\mv61xx.sys>  [(Verified)Marvell Semiconductor, Inc.,  1.2.0.24  built by: WinDDK, C:2007-08-01 23:28 M:2007-02-09 20:24]
[IBM ServeRAID 4M/4L/4Mx/4Lx/5i/6M/6i/7k Device Driver / nfrd960][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\nfrd960.sys>  [(Verified)IBM Corporation, 7.10.18, C:2007-08-01 23:28 M:2005-06-27 22:57]
[nv / nv][Running/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
[SiI 680 ATA Controller / Pnp680][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\pnp680.sys>  [(Verified)Silicon Image, Inc., 1, 2, 26, 0, C:2007-08-01 23:28 M:2006-11-15 18:32]
[Silicon Image SiI 0680 Medley Raid Controller / Pnp680r][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\pnp680r.sys>  [(Verified)Silicon Image, Inc, 1, 0, 1, 7, C:2007-08-01 23:28 M:2002-05-31 23:35]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2007-05-19 16:00 M:2007-05-19 16:00]
[ql1080 / ql1080][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ql1080.sys>  [(Verified)QLogic Corporation, 3.04, C:2007-08-01 23:47 M:2001-08-17 13:52]
[ql12160 / ql12160][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ql12160.sys>  [(Verified)QLogic Corporation, 7.21.1.1 (W2K), C:2007-08-01 23:28 M:2006-02-26 23:21]
[ql1280 / ql1280][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ql1280.sys>  [(Verified)QLogic Corporation, 7.13.01 (W2K), C:2007-08-01 23:47 M:2001-08-17 13:52]
[ql2100 / ql2100][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ql2100.sys>  [(Verified)QLogic Corporation, 7.05.05 (W2K), C:2007-08-01 23:28 M:2006-02-26 23:21]
[ql2200 / ql2200][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ql2200.sys>  [(Verified)QLogic Corporation, 8.1.5.12 (W2K IP), C:2007-08-01 23:28 M:2006-02-26 23:21]
[Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Stopped/Manual Start]
    <system32\DRIVERS\Rtnicxp.sys>  [(Verified)Realtek Semiconductor Corporation                           , 5,663,1212,2006 built by: WinDDK, C:2007-11-03 12:34 M:2006-12-14 16:44]
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Stopped/Manual Start]
    <system32\DRIVERS\Rtenicxp.sys>  [(Verified)Realtek Semiconductor Corporation                           , 5.650.0616.2006 built by: WinDDK, C:2008-02-24 17:25 M:2006-06-17 20:36]
[S150sx8 / S150sx8][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\S150sx8.sys>  [(Verified)Promise Technology, Inc.,  1.00.0.51, C:2007-08-01 23:28 M:2006-02-26 23:21]
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
    <\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys>  [(Verified)360安全中心, 2, 2, 2, 1007, C:2008-09-02 18:12 M:2008-09-02 18:12]
[SiI-3512 SATALink Controller / SI3112][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3112.sys>  [(Verified)Silicon Image, Inc., 1, 3, 68, 0, C:2007-08-01 23:28 M:2007-01-26 18:55]
[ATI-437A Serial ATA Controller / SI3112r][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3112r.sys>  [(Verified)Silicon Image, Inc, 1, 0, 56, 0, C:2007-08-01 23:28 M:2006-01-12 18:56]
[SiI-3114 SATALink Controller / SI3114][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3114.sys>  [(Verified)Silicon Image, Inc., 1, 3, 10, 0, C:2007-08-01 23:28 M:2006-06-21 18:21]
[SiI-3114 SATARaid Controller / SI3114r][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3114R.sys>  [(Verified)Silicon Image, Inc, 1, 0, 15, 0, C:2007-08-01 23:28 M:2006-04-11 02:08]
[SiI-3114 SoftRaid 5 Controller / Si3114r5][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\Si3114r5.sys>  [(Verified)Silicon Image, Inc, 1, 5, 10, 0, C:2007-08-01 23:28 M:2006-09-05 17:48]
[SiI-3124 SATALink Controller / SI3124][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3124.sys>  [(Verified)Silicon Image, Inc., 1, 3, 20, 0, C:2007-08-01 23:28 M:2006-11-02 23:20]
[SiI-3124 SATARaid Controller / SI3124r][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3124R.sys>  [(Verified)Silicon Image, Inc, 1, 0, 0, 2, C:2007-08-01 23:28 M:2006-02-26 23:21]
[SiI-3124 SoftRaid 5 Controller / Si3124r5][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\Si3124r5.sys>  [(Verified)Silicon Image, Inc, 1, 5, 11, 0, C:2007-08-01 23:28 M:2006-09-20 18:38]
[SiI-3132 SATALink Controller / SI3132][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SI3132.sys>  [(Verified)Silicon Image, Inc., 1, 0, 19, 0, C:2007-08-01 23:28 M:2006-11-01 20:30]
[SiI-3132 SoftRaid 5 Controller / Si3132r5][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\Si3132r5.sys>  [(Verified)Silicon Image, Inc, 1, 5, 14, 0, C:2007-08-01 23:28 M:2007-01-25 21:57]
[SATALink driver accelerator / SiFilter][Running/Boot Start]
    <system32\DRIVERS\SiWinAcc.sys>  [(Verified)Silicon Image, Inc., 1.0.0.11, C:2007-08-01 23:28 M:2004-11-01 17:21]
[SATALink External Device Filter / SiRemFil][Running/Boot Start]
    <system32\DRIVERS\SiRemFil.sys>  [(Verified)Silicon Image, Inc., 1, 1, 6, 0, C:2007-08-01 23:28 M:2006-10-18 20:20]
[SiS AGP Filter / SISAGP][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SISAGPX.sys>  [(Verified)Silicon Integrated Systems Corporation, 7.2.0.1170 built by: WinDDK, C:2007-08-01 23:28 M:2003-07-18 16:58]
[SiSRaid / SiSRaid][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SiSRaid.sys>  [(Verified)Silicon Integrated Systems, 5.1.1039.1090, C:2007-08-01 23:28 M:2006-02-26 23:21]
[SiSRaid2 / SiSRaid2][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\SiSRaid2.sys>  [(Verified)Silicon Integrated Systems Corp, 2.03.00, C:2007-08-01 23:29 M:2006-02-26 23:21]
[Sparrow / Sparrow][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\sparrow.sys>  [(Verified)Adaptec, Inc., v2.0a (ReleaseBinaries.001205-1804), C:2007-08-01 23:43 M:2001-08-17 14:07]
[symc8xx / symc8xx][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\symc8xx.sys>  [(Verified)LSI Logic, 5.1.2409.1 (ReleaseBinaries.001205-1804), C:2007-08-01 23:47 M:2001-08-17 14:07]
[sym_hi / sym_hi][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\sym_hi.sys>  [(Verified)LSI Logic, 5.1.2462.0 (Lab01_N.010309-0027), C:2007-08-01 23:45 M:2001-08-17 14:07]
[sym_u3 / sym_u3][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\sym_u3.sys>  [(Verified)LSI Logic, 5.1.2462.0 (Lab01_N.010309-0027), C:2007-08-01 23:46 M:2001-08-17 14:07]
[Transmeta TM 8000 AGP Filter Driver / tmagp][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\tmagp.sys>  [(Verified)Transmeta Corporation, 1.2.0.3, C:2007-08-01 23:28 M:2004-10-18 17:12]
[ULi AGP Bus Filter Driver / uliagpkx][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\agpkx.sys>  [(Verified)ULi Electronics Inc., 5.1.2600.2300 built by: WinDDK, C:2007-08-01 23:28 M:2006-02-26 23:03]
[UlSata / UlSata][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ulsata.sys>  [(Verified)Promise Technology, Inc.,  1.00.0.27, C:2007-08-01 23:28 M:2006-02-26 23:21]
[ulsata2 / ulsata2][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\ulsata2.sys>  [(Verified)Promise Technology, Inc.,  1.00.0.33, C:2007-08-01 23:28 M:2006-02-26 23:21]
[VIA AGP Filter / viaagp1][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\viaagp1.sys>  [(Verified)VIA Technologies, Inc., 5.1.0.3442 built by: VIA, C:2007-08-01 23:28 M:2003-07-02 10:42]
[VIA ATA/ATAPI Host Controller / viapdsk][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\viapdsk.sys>  [(Verified)VIA Technologies, Inc., 5.1.2600.104, C:2007-08-01 23:29 M:2006-02-26 23:21]
[videX32 / videX32][Stopped/Disabled]
    <\SystemRoot\system32\DRIVERS\videX32.sys>  [(Verified)VIA Technologies, Inc., 6.0.3790.160, C:2007-08-01 23:53 M:2006-10-18 03:22]
[VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
    <system32\DRIVERS\xfilt.sys>  [(Verified)VIA Technologies,Inc, 6.0.5728.160, C:2007-08-02 00:13 M:2006-10-19 00:39]
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
    <system32\DRIVERS\yk51x86.sys>  [(Verified)Marvell, 10.51.1.3 built by: WinDDK, C:2007-12-28 17:51 M:2007-12-28 17:51]


========================================
进程

[PID: 600 / SYSTEM]   \SystemRoot\System32\smss.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 672 / SYSTEM]   \??\C:\WINDOWS\system32\csrss.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 696 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\klogon.dll  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]

[PID: 740 / SYSTEM]   C:\WINDOWS\system32\services.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 752 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 900 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 980 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 1020 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 1172 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 1204 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 1404 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 1656 / Administrator]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
    C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]
    C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]
    D:\360safe\Antispy.dll  [(Verified)奇虎网, 4, 2, 0, 1006, C:2008-09-22 14:23 M:2008-09-22 14:23]
    D:\xunlei\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-05-21 19:47 M:2008-06-13 09:43]
    D:\xunlei\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-05-21 19:47 M:2008-06-13 09:43]
    D:\xunlei\Components\ResWorker\DsBho_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-05-21 19:47 M:2008-09-19 19:01]
    D:\xunlei\Components\ResWorker\DataProcessor_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-05-21 19:47 M:2008-09-19 19:01]
    C:\WINDOWS\system32\nvcpl.dll  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\WINDOWS\system32\NVRSZHC.DLL  [NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll  [Copyright 2004, 2, 0, 0, 0, C:2006-12-19 19:16 M:2006-12-19 19:16]
    C:\WINDOWS\system32\nvshell.dll  [N/A, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\Program Files\WinRAR\rarext.dll  [N/A, C:2007-07-26 20:50 M:2007-05-29 22:40]
    C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\ShellEx.dll  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-09-15 12:39 M:2008-09-15 12:40]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-09-15 12:39 M:2008-09-15 12:40]

[PID: 1840 / SYSTEM]   C:\WINDOWS\system32\AmdHpSrv.exe   [AMD, Inc., 1.3.9, C:2007-08-01 23:28 M:2006-02-26 23:02]

[PID: 1856 / SYSTEM]   C:\WINDOWS\system32\drivers\CDAC11BA.EXE   [Macrovision, 4.20.020, C:2008-05-10 19:18 M:2008-05-10 19:18]

[PID: 1876 / SYSTEM]   D:\baofeng\stormliv.exe   [(Verified)北京暴风网际科技有限公司, 3, 8, 10, 29, C:2008-03-11 14:33 M:2008-10-29 16:40]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\baofeng\bfoptdll.dll  [(Verified)北京暴风网际科技有限公司, 3, 8, 7, 16, C:2008-11-03 23:35 M:2008-08-01 20:11]

[PID: 1888 / SYSTEM]   C:\Program Files\CMBCHINA\WebProtect\WPService.exe   [(Verified)China Merchants Bank, 1, 0, 0, 1, C:2008-05-10 15:10 M:2007-08-27 16:35]
    C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll  [(Verified)China Merchants Bank, 1, 0, 0, 1, C:2008-05-10 15:10 M:2007-08-20 16:16]

[PID: 1928 / SYSTEM]   C:\WINDOWS\system32\nvsvc32.exe   [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\WINDOWS\system32\nvapi.dll  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 1972 / LOCAL SERVICE]   C:\WINDOWS\system32\wdfmgr.exe   [(Verified)Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act), C:2005-01-28 01:36 M:2005-01-28 01:36]

[PID: 288 / Administrator]   C:\WINDOWS\system32\RUNDLL32.EXE   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\NvMcTray.dll  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\WINDOWS\system32\nvapi.dll  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\WINDOWS\system32\NVRSZHC.DLL  [NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]

[PID: 324 / Administrator]   C:\WINDOWS\RTHDCPL.EXE   [(Verified)Realtek Semiconductor Corp., 2.2.0.2, C:2007-11-03 12:36 M:2008-04-10 16:52]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]

[PID: 872 / Administrator]   C:\Program Files\Internet Explorer\iexplore.exe   [(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-26 19:33 M:2007-05-20 00:00]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]
    C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
    D:\xunlei\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-05-21 19:47 M:2008-06-13 09:43]
    F:\IESuper\iesuper.dll  [(Verified)IESuper.com, 1, 1, 1, 0, C:2008-07-31 14:39 M:2008-07-31 14:39]
    C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll  [(Verified)China Merchants Bank, 1, 0, 0, 1, C:2008-05-10 15:10 M:2007-08-20 16:15]
    D:\xunlei\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-05-21 19:47 M:2008-06-13 09:43]
    D:\xunlei\Components\ResWorker\DsBho_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-05-21 19:47 M:2008-09-19 19:01]
    D:\xunlei\Components\ResWorker\DataProcessor_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-05-21 19:47 M:2008-09-19 19:01]
    C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx  [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-09-15 12:39 M:2008-09-15 12:40]
    C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prloader.dll  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]
    C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
    C:\WINDOWS\system32\mscoree.dll  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]
    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]

[PID: 892 / Administrator]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]

[PID: 1604 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]

[PID: 2584 / Administrator]   F:\setup_52983\arswp\ArSwp.exe   [(Verified)ArSwp.com, 2, 8, 2, 1115, C:2008-11-21 21:14 M:2008-11-15 11:58]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
    C:\Program Files\InstallShield Installation Information\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll  [(Verified)Kaspersky Lab, 7.0.1.325, C:2008-02-08 18:37 M:2008-02-08 18:37]
    F:\setup_52983\arswp\plugin\ArFix.dll  [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2008-11-21 21:14 M:2007-11-28 15:19]
    C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll  [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31]
    C:\WINDOWS\system32\nvcpl.dll  [(Verified)NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\WINDOWS\system32\NVRSZHC.DLL  [NVIDIA Corporation, 6.14.11.5822, C:2007-04-20 06:05 M:2007-04-20 06:05]
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll  [Copyright 2004, 2, 0, 0, 0, C:2006-12-19 19:16 M:2006-12-19 19:16]
    C:\WINDOWS\system32\nvshell.dll  [N/A, C:2007-04-20 06:05 M:2007-04-20 06:05]

[PID: 2948 / SYSTEM]   C:\Program Files\Kingsoft\KAC\Service\kaccore.exe   [(Verified)Kingsoft Corporation, 2008,11,03,330, C:2008-11-03 08:49 M:2008-11-03 08:49]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    C:\Program Files\Kingsoft\KAC\Service\corehelper.dll  [(Verified)Kingsoft Corporation, 2008,10,20,303, C:2008-10-20 17:35 M:2008-10-20 17:35]

[PID: 864 / Administrator]   F:\Kingsoft Antispy\monitor\kastray.exe   [(Verified)Kingsoft Corporation, 2008,11,14,88, C:2008-11-14 12:16 M:2008-11-14 12:16]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]
    F:\Kingsoft Antispy\monitor\kaspop.dll  [(Verified)Kingsoft Corporation, 2008,11,14,93, C:2008-11-14 17:35 M:2008-11-14 17:35]

[PID: 3740 / Administrator]   F:\Kingsoft Antispy\monitor\kudiskmon.exe   [(Verified)Kingsoft Corporation, 2008,11,10,55, C:2008-11-12 22:15 M:2008-11-12 22:15]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030), C:2007-05-19 16:00 M:2007-05-19 16:00]
    D:\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-04-24 16:40 M:2008-07-10 17:42]


========================================
文件关联



========================================
AutoRun.INF



========================================
Winsock提供者



========================================
HOSTS

    127.0.0.1 localhost
    127.0.0.1 yu.8s7.net
    127.0.0.1 1.jopanqc.com
    127.0.0.1 2.joppnqq.com
    127.0.0.1 wg.47255.com
    127.0.0.1 1.joppnqq.com
    127.0.0.1 xxx.m111.biz
    127.0.0.1 1.jopenqc.com
    127.0.0.1 1.jopenkk.com
    127.0.0.1 xxx.vh7.biz
    127.0.0.1 xxx.j41m.com
    127.0.0.1 3.joppnqq.com
    127.0.0.1 d.93se.com
    127.0.0.1 www.868wg.com
    127.0.0.1 xxx.mmma.biz
    127.0.0.1 ilove.com
    127.0.0.1 tp.shpzhan.cn
    127.0.0.1 www.tomwg.com
    127.0.0.1 www.cike007.cn
    127.0.0.1 www.22aaa.com
    127.0.0.1 xx.exiao01.com
    127.0.0.1 www.exiao01.com
    127.0.0.1 www.exiao01.com
    127.0.0.1 new.749571.com
    127.0.0.1 xtx.kv8.info
    127.0.0.1 cao.kv8.info
    127.0.0.1 1.jopmmqq.com
    127.0.0.1 171817.171817.com
    127.0.0.1 d2.llsging.com
    127.0.0.1 down.malasc.cn
    127.0.0.1 llboss.com
    127.0.0.1 nx.51ylb.cn
    127.0.0.1 my.531jx.cn
    127.0.0.1 qqq.dzydhx.com
    127.0.0.1 qqq.hao1658.com
    127.0.0.1 www.333292.com
    127.0.0.1 down.18dd.net
    127.0.0.1 up.22x44.com
    127.0.0.1 aaa.faba01.com
    127.0.0.1 bad.tqdlt.cn
    127.0.0.1 1.chsipo.com
    127.0.0.1 c3.aishangai.net
    127.0.0.1 c2.aishangai.net
    127.0.0.1 xxx.188dm.com
    127.0.0.1 x2.1a2b3c1.com
    127.0.0.1 d1.163500.net
    127.0.0.1 down.google-serv.cn


[/CODE]